|
EH-Net
|
|
May 20, 2013, 09:55:16 AM
|
 Show Posts
|
|
Pages: [1] 2 3 ... 9
|
|
1
|
Ethical Hacking Discussions and Related Certifications / Wireless / Re: colubris wireless tech
|
on: October 19, 2012, 02:36:28 AM
|
I don't think you ever said, how did you first come across said signal. did it just show up?
Are you sure it's even out there, and you're not just looking at a client trying to associate with something?
Those channel numbers make no sense. that's not the wifi range.
If it is hidden there wouldn't be a broadcast beacon. It would need a client trying to connect to it.
I would, if you have the hardware and time, set up your equipment in with airodump running, and writing to a file, let it run for a few days, and then go back through all the data. Again, airodump, with your card set in promiscuous mode will see all the radio waves in use around, you which would include that access point, or it's clients.
ok you right , if its hidden then there wouldn't be any broadcast from becon , but i think i found out wat is this >> its a surveillance cameras AP i saw it with my own eyes , searched google for a picture and it was the same , it was hanging out there beside surveillance cameras dunno about the channels , or how its hidden but i guess its a hell of a Security for AP  |
|
|
|
|
2
|
Ethical Hacking Discussions and Related Certifications / Wireless / Re: colubris wireless tech
|
on: October 18, 2012, 04:23:43 AM
|
hey guys i know its an old thread but i got new info about it ok the colubris networks if u searched google its new technology for wireless access points security purposes . when i capture it via wireshark i can get the device name and mac address ofcourse airodump getting the mac address but ...with channel 128 and changing everytime some times i can see the channel with number 134 and if i scanned again i can see the channel 132 every time changes and some times fixed to 134 dunno wat kina of channels is this about the ESSID its length 0 so it hidden authentication is open no clients connected i think , i guess wireshark got that name while broadcasting its becon i got pdf from google for colubris networks , and found its configuration and i think the only way to login to this AP via this site https://www.wifi-soft.net/wifilan/ , and if u want to login from another method would be LAN or WAN so i think there's no access via wifi any ideas ? |
|
|
|
|
3
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: php/meterpreter Redirection after session !!
|
on: October 02, 2011, 05:40:16 PM
|
the end goal is to redirect him to the original site ,, like iframe he is openning normal webpage and u act ur self like a router , to redirect him to his original request thats all
but in this technique he will be redirect after been exploited to the original link path he clicked on ?? In the PHP file, add the following code right after the PHP meterpreter has been initialized: header("Location: http://whatever.tld"); Then in the Meterpreter, you make sure it migrates to another file first by writing your own script and then make it call itself again on perhaps another listening process (multi/handler). I have no exact way to do this, as I've never done but that is how you could do it. All you gotta do, is to learn some basic Meterpreter scripting, and some very basic PHP so you understand how it functions. Preferably you research this first on your own. Remember, this forum is for educational and ethical purposes only. thanks and yes i always learn for knowledge not for hacking it self and ofcourse its for educational and ethical purposes only . |
|
|
|
|
7
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / C|EH self study !!
|
on: October 01, 2011, 02:54:49 AM
|
|
i've been studying CEH for while and i took a course in it , and i have already 2 years experience in security field as they say ,,, but i want to know that if i requested the voucher code with just the 2 years security experience ,, would they agree to gimme the voucher or ,, should i be certified in CCNA , MCSE , and more like some one told me !!! ?
|
|
|
|
|
9
|
Ethical Hacking Discussions and Related Certifications / Wireless / Re: colubris wireless tech
|
on: June 18, 2011, 05:06:12 AM
|
You could force a deauthentication against an already authenticated client, and get the SSID that way (that's how I would get the SSID, by forcing a client to resend the SSID in an authentication packet.) This is also how you go about speeding the process with WEP cracking, etc, as you need enough weak IV's to crack the key, and by deauth'ing attached clients, repeatedly, you force them to resend the SSID and data enough to crack it.
That way, because the client is not yet associated, fully, with the AP's encryption in play, the SSID will be transmitted in the clear, as it would anytime a new client would associate to the AP.
Edit: To answer your last queston:
and what if no one appear to connected to it not in kismet at least !! ?
IF nobody's connected, yet, and you don't already have the SSID, you'll have to wait until someone tries to connect...
when im sniffing with wireshark i see communication happining with 3 sides i think with that access point but with airodunp or kismet u dont see anything how is that possible that there's some one connecting to this AP but doesn't appear on airodump ?? and if that was encrypted video streaming ...wireshark doen't decrypt that and check this page out to know what im trying to say and to think the way im thinking http://www.connect802.com/colubris.htmthanks buddy |
|
|
|
|
10
|
Ethical Hacking Discussions and Related Certifications / Wireless / Cantenna active element ,about question ?
|
on: June 17, 2011, 10:27:15 AM
|
|
i tried recently to make cantenna with pringles tube but i think the problem was with the active element the conductor i think its bad conductor
i tried with NetStumbler and saw the graph of the signal always when i put on the copper gives bad signal and when i put on the small conductor golden copper that came out with the RP-SMA it gives good signal !!
any one have any idea where to get good copper element quality to conduct my signal from the pigtail cable ?
|
|
|
|
|
11
|
Ethical Hacking Discussions and Related Certifications / Wireless / Re: colubris wireless tech
|
on: June 17, 2011, 10:24:44 AM
|
If you use kismet (Linux) you should see it, typically, IF someone else attaches to it and uses it. While SSID's aren't broadcast when they're hidden, they still HAVE to transmit in the packets, with authenticated machines / machines that KNOW about the AP, to talk to it, and kismet will then pick them up.
ya buddy i know that but i believe they sending to each others in encrypted data but the question can't i connect to any access point with just the mac ? and what if no one appear to connected to it not in kismet at least !! ? |
|
|
|
|
12
|
Ethical Hacking Discussions and Related Certifications / Wireless / colubris wireless tech
|
on: June 17, 2011, 08:47:15 AM
|
|
well im trying to intercept AP signal transmitting around my home i found out with wireshark that its colubris Access point its hidden completely i can't find it via airodump or anything just wireshark ....
searched on google for while found out its the most security over wireless access points so....in real life like this im just intercepting communication between two spots the user i think and man in the middle and the access point how to connect to this access point ??
what is the next steps in this pentesting operation ...?
|
|
|
|
|
14
|
Ethical Hacking Discussions and Related Certifications / Wireless / Re: hidden SSID .... ?
|
on: July 30, 2010, 02:47:43 AM
|
Well, you might be able to tell the type, based on the MAC address. After all, if you're seeing it, at all, it must be sending out Broadcast packets, so those should have a MAC address in them, which you can compare to the lists and find vendors for, etc.
As for name, unless it's broadcasting it's name (which some do, some don't,) you won't likely find a name, without a client authenticating to it.
well ya right i forgot about that mac address part i'd try to figure it out |
|
|
|
|
Loading...
|
OSCP - Offensive Security Certified Professional : Failed my first attempt at the OSCP exam
